https://seclab.cyshield.com/tags/account-takeover/Recent content in Account Takeover on Cyshield SeclabHugo -- gohugo.ioen© 2026 Cyshield.Sun, 31 May 2026 00:00:00 +0000https://seclab.cyshield.com/posts/cyctf-2023-challenge-a-whitebox-walkthrough-of-the-secret-app-v1.0/Sun, 31 May 2026 00:00:00 +0000https://seclab.cyshield.com/posts/cyctf-2023-challenge-a-whitebox-walkthrough-of-the-secret-app-v1.0/A whitebox walkthrough of the CyCTF 2023 ‘Secret App v1.0’ challenge — chaining second-order blind SQL injection, a CAPTCHA logic flaw, and insecure session handling into a full admin account takeover.